Proposition safety checks + float->double migration
FormulaParser tests